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[0001] The present invention relates to an integrated automation system that has utility in 
the refining, petrochemical and chemical processing industries as well as the oil and 
gas production industry, metal manufacturing industry, maritime drilling businesses 
and environmental monitoring. In addition, the present invention relates to a system 
for use with electrical production and distribution, waste treatment and distribution, 
wastewater treatment and gas pipelines and distribution. 

[0002] The invention relates to Supervisory Control and Data Acquisition (SCADA) 
systems generally. In addition, the invention relates to method and apparatus for use 
in the communication for a SCADA system including use of Intelligent Electronic 
Devices, which are also called remote terminal units in this application or " (RTU) " 

BACKGROUND OF THE INVENTION 

[0003] The automation industry has had major developments in the implementation of 
SCADA monitoring and control systems. A need has long existed for an integrated 



system, which uses small PC's to run factory lines, and other large manufacturing 
facilities. 

The integration problems were rampant in the industry. Either, hosts were inadequate 
or defective. A unique RTU was developed to facilitate the integration of software. 

1 . A need has long exists for a less expensive RTU 

2. A new board has been desired to reduce the costs of RTU by at least 25% 

3. A need has existed for a system, which works faster than traditional host 
systems 

4. A need has existed for an improved SCADA system and method of 
communication, which can talk to more systems as host more than traditional 
systems. 

A vital part of any process control system is the initial communication and periodic 
point-to-point communication of the system, including the process input values, the 
database, the displays and the like. Such a communication procedure is associated 
with a SCADA system, which in its most generic definition is essentially a process 
control system. The components of a typical SCADA system comprise a SCADA 
device and one or more remotely connected Intelligent Electronic Devices. As used 
herein, the term SCADA device is used as a convenient shorthand for what may be a 
collection of electronic equipment, including a computer based controller, which can 
be a server, also termed the "enterprise server" that is used to remotely monitor 



communication and/or control the operation of one or more remote RTUs such as 
relays, meters, transducers and the like. In general, the enterprise server is located 
miles away from the RTUs presenting many SCADA system communication 
difficulties. However, such a definition should not preclude an enterprise server 
5 being located much closer, even in the same plant as the RTU or RTUs. 

[0006] Communication for a SCADA system traditionally has been very time and labor 
intensive. The initial set up of the RTU required an expensive technician to go into 
the field to configure the RTU. Subsequent maintenance communication has also 
□ been particularly time and labor intensive where the RTU is in an extremely remote 

t|0 location, such as on a mountain top or under snow on a pipeline in Alaska with 

P respect to the enterprise server. In such a case, transportation and communication 

problems have been abundant. Therefore, reducing the time and effort required to 
run communication of a SCADA system while insuring that the SCADA device 
^ database and overall SCADA system operation meets the highest possible accuracy 

315 standards would provide substantial cost advantages over current communication 

procedures. 

[0007] Traditionally, RTU configuration has involved steps of: 

1. Assembling and transporting to the RTU location a collection of complex and 
expensive test equipment and signal generators that are required to produce the 
20 needed configuration 
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2. Requiring an expensive technician at the remote location to inject the data into 
the RTU's inputs. 

3. Requiring a second expensive technician at the central location(s) to verify the 
RTU is correctly processing according to the new configuration. 

5 4. Such a system presents many drawbacks. For example, two technicians at 

disparate locations are required to perform the service. One of the technicians 
may be required to travel long distances. Moreover, in most SCADA systems, 
the RTU must be disconnected from the process that it is monitoring and/or 
=g controlling, which may affect the process under control. 

OiO 5. There is a need for method and apparatus that address the shortcomings of 

SS present communication of a SCADA system. These needs are now met by the 

! ^ present invention. 



: BRIEF DESCRIPTION OF THE FIGURES 

[0008] The following detailed description of the preferred embodiment, is better understood 
15 when read in conjunction with the appended drawings. For the purpose of illustrating 

the invention, there is shown in the drawings an embodiment that is presently 
preferred, it being understood, however, that the invention is not limited to the 
specific methods and instrumentalities disclosed. 

[0009] FIG. 1 is a SCADA system according to the present invention. 
20 [00010] FIG. 2 provides a detail of an RTU of the present invention. 
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[00011] FIG. 3 is a detail of a user interface with a enterprise. 



[00012] FIG. 4 a diagram of international with external systems. 



DETAILED DESCRIPTION OF THE EMBODIMENTS 
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[00013] According to a presently preferred embodiment, a system and method for 
communication in a SCADA system will now be described with reference to the 
Figures. It will be appreciated by those of ordinary skill in the art that the description 
given herein with respect to those Figures is for exemplary purposes only and is not 
intended in any way to limit the scope of the invention. For example, an RTU is 
described herein with reference to a remote terminal unit, such as a microprocessor- 
based meter is merely for the purpose of clearly describing the present invention and 
in not intended as a limitation. The RTU could be, for example, a microprocessor- 
based meter. The methods described herein could be provided as a software package 
that operates directly on the RTU or on the SCADA device. 



f [00014] Referring now to FIG. 1, there is shown a SCADA system 10 of the present 
15 invention. As shown, the system comprises an enterprise server 12, which has a 

display device 14 for displaying data to a human operator (not shown). A second 
enterprise server 16 can optionally be connected to the system, which may have a 
display device 18 connected thereto. An RTU 20 such as a microprocessor-based 
relay, which monitors and/or controls a physical process 22, and an optional local 
20 computer 24 for configuring RTU 20 locally. 
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[00015] RTU 20 communicates with enterprise servers 12 and 16, via a connection called 
TAC 26. TAC 26 can reside on server 12 or between server 12 and server 16, or on 
local computer 24.. 

[00016] Software termed the "AES" 28 is the configuration tool which can communicate 
with the RTUs. Configuring occures by use of a configuration tool, ARME. The 
AES can reside on the server 12, 16, or between 12 and 16 or on the local computer 
24. 

[00017] Generally, in this system, the RTU measure physical properties and can be remotely 
configured by the AES 28. Additionally, the RTU's can run simulations, and provide 
that data to the enterprise server 12 or 14 based on instruction via the AES. 

[00018] For a simulation, a, SCADA system 10 requires communication with RTU 20 and 
the enterprise server 16 and/or 14, or even others. 

[00019] The AES provides by RTU 20 with simulation instructions so the RTU can run tests 
without the need for an operator or expensive test equipment to inject a new 
configuration of an RTU into system 10. Moreover, RTU 20 can continue to monitor 
and/or control process 12, while the simulation is running. 
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[00020] Referring to FIG. 2, an exemplary RTU 20 is shown in further detail. As shown, the 
essential parts of RTU 20 comprise a microprocessor 30, an analog-to-digital 
converter (ADC) 32, a digital signal processor 34, a communication interface 36, 
such as at least one bidirectional port or one or more directional input ports or 
interfaces, or output ports or interfaces 38, a user interface 40 and a memory area 42. 



Memory area 42 comprises both Read-Only Memory (ROM) and Random Access 
Memory (RAM) and comprises both a program memory 44 and a communication 
port register memory 46, which includes a command register. 

[00021] As with many standard RTUs such as the microprocessor-based relay, RTU 20 
5 measures aspects of a physical process 22 such as currents and voltages and converts 

the measured values into a digital equivalent via ADC 32 and digital signal processor 
34. Microprocessor 30 moves the digital representation of the measured values into 
memory area 42 where the data can be accessed by programs and external devices 
such as an enterprise server. Moreover, microprocessor 30 can perform various 
BO predetermined functions on the data, such as fault detection as in the case of a relay, 

P or control the process. Microprocessor 30 is also in communication with 

2 communication interface 36, also known as the AES so that data (i.e., digital 
representative data) can be transferred to an external device such as enterprise server 

3 14 or 16 or both, or even more servers. 

is [00022] Additionally, communication interface 36 (the AES) allows an external device such 
as local computer 24 or enterprise server to provide commands and data to RTU 20. 

[00023] Input/output interface 38 is coupled to microprocessor 30 and provides binary input 
signals from a controlling device. Moreover, RTU 20 provides control signals to the 
controlling device such as a breaker close or open signal if the controlling device is a 
20 circuit breaker. 
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[00024] User interface 40 provides a local mechanism for gaining access to the data in 
memory 42. In this way, a local operator can provide initial configuration data to 
RTU 20 or check the status of data within memory 42. 

[00025] FIG 3 shows the detail of the reconfiguration process. For reconfiguation while an 
RTU is on line, a user interface 46 provides input parameters to the RTU via an input 
device such as a keyboard or a keypad at the server 12. Additionally, interface 46 
may display communication data from the RTU allow a user to change the values for 
the data stored in the RTU. Alternatively, this same user interface 46, can initiate 
steps to place RTU 20 is in a simulation or test mode. 

Significantly, user interface 46 provides another mechanism to command RTU 20 
and place RTU 20 either "off line" or into a "sleep mode". Specifically, user 
interface 46 can be used to remove specific tasks by interval or entirely from the task 
list initially installed in the RTU. This same interface permits additional tasks to be 
added to the RTU. If a task is deleted from the RTU, or if the RTU is put into 
periodic "wake up" mode, the RTU will not store data in memory, or transmit. This 
feature is particularly useful for a system to be used on long space flights, where the 
Houston Johnson Space Center needs to only "wake up" certain RTU's at periodic 
times. 

[00027] Additionally, user interface 46, which interacts with the AES program 28 permits a 
user to request internal diagnostics from the RTU to determines the internal status of 
RTU 20 such as memory failure or processor failure while all other RTU and servers 
remain on line. 



[00028] Referring now to FIG. 4, a flow chart is shown that depicts the interaction of an RTU 
for metering electricity with a SCAD A system of the invention.. During normal 
operation, a metering module 46 writes metered values to register memory 42. 
Moreover, input/output task 48 writes binary status values to register memory 42. 
5 The register memory values written by metering module 46 and input/output task 48 

are, then transmitted to the enterprise server 14 for further processing. As described 
in above, communication port with communicates with the AES controls the 
interaction between RTU 20 and enterprise server 14. For clarity and brevity, the 
communication process is described in reference to communication interface 36. 

30 [00029] During a typical communication sequence (i.e., normal mode) three steps are 

P performed. First, a command is received via communication interface 36 requesting 

~j the transmission of data values from memory 42. The data values are then retrieved 

^ from memory 42, and prepared for transmission via the AES, for example, properly 

5 formatting the data. Finally, the prepared response is transferred to the external 

35 device via the AES. An encapsulation layer (GEL) is also used. 

[00030] The following terms are used here in. 

1. The term "SCAD A" means Supervisory Control and Data Acquisition 
Systems. 

2. The term "ARME" means the RTU configuration or maintenance tool for the 
20 SCADA system. ARME is an OPC Client that communicates through the AES 

that allows RTU's to be remotely reconfigured after deployment. TAC 
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combines with AES to provide a data acquisition front-end for relational 
databases. 

3. The term "TAC" means The AutoSol Connection, which is a data acquisition 
front end connection for databases. 

4. The term "GEL" means Generic Encapsulation Layer. 

[00031] The invention relates to communication technology which can simultaneously handle 
multiple types of telemetry and different protocols from various remote terminal 
units, such as custody control computers for pipes lines, pump off controllers, non- 
specific controllers, and water meters. 

[00032] The invention is a server-based system that can provide information to a wide variety 
of client server interfaces, with the only limitation on capacity being bandwidth and 
processing power. 

[00033] The invention works with lease line, radio, public switched telephone networks, 
cellular phones, and satellite and Internet telemetry reception. 

[00034] For example, this invention could handle the communication for utility metering for 
an entire city. Multiple servers of the invention can be used, and the servers can be 
used in parallel to each other, and enable millions of terminals to receive and 
transmit communications to a central server and enables the utility to configure 
millions of RTlFs at once. 
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The invention involves several features, an AES communication tool which has as 
the new benefits, the ability to conserve resources within an operating system 
including, memory, and the number of threads, which can be run through Microsoft 
NT. This new SCAD A system was developed to handle these and other objects, 
including an ability of the user to assign threads to specific ports to conserve thread. 

The AES communication system is capable of handling communication systems with 
over 100,000 RTU's while continuing non-stop communication with no downtime. 
The AES component enables the user to add or delete RTU while continuing to 
operate and function on line. This AES component also enables the user to add 
additional servers to the AES while the user is on line, without downtime. 

The AES, is essentially a windows-based OPC server, (object linking and embedding 
for process control), which communicates with a plurality of RTU's simultaneously. 
The present invention relates to a window based communication server that permits 
digital communication to a field device, and enables the user to digitally connect or 
disconnect any one or more of the RTU while the system is operating on line. There 
could be at least 1000 RTU's engageable and disengageable while the system is on 
line. The system includes hardened computers suitable for performing remote 
automation in environmentally exposed locations using software compatible with the 
Windows 98, NT and 2000 operating systems. 

The hardware of the invention is capable of performing remote control, alarm 

detection, data acquisition, and data management functions. The software provides 

communication to RTU's via telemetry systems, acquired data management via 
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commercially available databases, such as Oracle, Microsoft Access, Microsoft SQL 
server, and Cybase and RTU status and performance values and parameters to data 
centers. 

[00039] The AES preferably runs as an NT server. AES has: 
5 1 . Connection modules, which are connected from a standard port, and include: 

a. TCPIP 

b. Dialup 
Jf c. Serial 

=! Other modules could be added depending on the hardware interface, such as an ARC 

rtO NET connection module; and 

E; 2. Protocol Modules - the messaging language 

□ a. Enron Modbus protocol module 

b. ABB total flow module 

[00040] SCADA system hardware usable in this invention includes at least one such as the 
15 RTU 3000, 4000E or 5000E. These models have different I/O capability, with the 

3000 unit being the smallest and only communication ports to meet different 
application requirements and budgets. 

[00041] The inventive SCADA system includes: 
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1. ARME; 

2. AES, 

a. Communication Software that is an NT Service 

b. Configuration Software which is an ActiveX Control, and 

5 3. TAC. 

[00042] The ARME is the RTU configuration or maintenance tool for the SCADA system. 

ARME is an OPC Client that communicates through the AES that allows RTU's to 
ff be remotely reconfigured after deployment. TAC combines with AES to provide a 

i data acquisition front-end for relational databases. 

00 [00043] TAC not only is an OPC Client but also has an ODBC interface that is compatible 
3 with all leading relational database products. 

fi [00044] The ActiveX AES Configuration Software merges with any other software that is an 
s * Active X container to allow modification of the AES Commiunication Software. The 

AES Configuration Software has specific features that allow the remote 
15 configuration of the AES Communication Sofware, such as over the Internet. The 

AES Configuration Software provides a set of windows that allows the end user to 
define the communication desired with the RTU. For example, if a client wants to 
communicate with a "Totalflow" instrument, a window allows the user to set up the 
connection type, and then set up a virtual port associated with that connection type. 
20 A Windows Interface allows the user to select a serial connection type or serial port, 

13 



and define multiple virtual ports, which are associated with an actual port, such as a 
COM Port 1. Next, the user selects a protocol, such as Modbus. The user then 
defines a device, which is to be communicated with via the Modbus protocol. All 
communication parameters are then selected and then the AES Communication 
5 Software is setup for communication with the device through the port. 

[00045] The AES Configuration Software can modify an offline database where the interface 
is OLE DB. This feature allows the invention to be compatible with any relational 
database. When a new device is selected, or new parameters are entered, the changes 

:i that are made to the offline database are automatically assimilated by the AES 

go Communication Software. 

H [00046] AES and ARME and TAC run on Microsoft Windows 98TM, NTTM, or 2000TM. 
B The host system (personal computer) requires a minimum of 66 MHz processor 

;£ speed and a minimum of 16 Megabytes of RAM. The preferred system would be a 

5 00 MHz process with at least 1 25K of Ram. 

15 [00047] The host system's operating environment must be Microsoft Windows 98TM, 
NTTM, or 2000TM, with 2000TM being the preferred operating system. The 
invention is compatible with Win32 API. The modular design, based on COM 
Objects, a Microsoft standard, allows the present invention to be extended to support 
different connection types and protocols. 
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[00048] Communication can be established between a Microsoft Windows base computer 
and an RTU immediately upon powering the RTU and without RTU configuring or 
programming. 

[00049] Automation functionality in the RTU can setup through the following method: 

1. Step 1: Select a automation function to be executed in the RTU from the 
functions available in an ARME program. 

2. Step 2. Select additional parameters associated with the specific function. 

3 . Step 3 : Communicate the function from ARME through the AES to the RTU; 

4. Step 4: Optionally functions can be added to a function map and portions or 
all of the function map can be communicated from ARME through the AES to 
the RTU; 

5. Step 5: Optionally functions can be added to a function map and 
communicated from ARME through AES simultaneously to many RTU's; 

6. Step 6: Reconfigures existing RTU's via the AES with new function maps 
simultaneously. 

7. Exemplary function blocks that solve data processing application problems 
include: 

a. Staging function block, 

b. Analog alarm function block, 
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c. Gas metering calculation block, 

d. Digital alarm blocks, 

e. Archive blocks containing historical measurement or data records with 
date stamps 

f. The ARME consists of function maps. 

At least one library of function blocks that can be included in each map. The ARME 
has customizable function block ability; enabling end users to self develop and 
customize function blocks with a VB language. The ARME overwrites a Simulation 
Environment to simulate a function map in a host computer prior to loading the 
function map in an RTU. The ARME can download function maps to RTU; upload 
function maps from RTU's; and synchronize to one or more RTU's with the internal 
computer clock. 

The RTU has a software component termed "the soft RTU" which is loaded on the 
hardware, the "RTU hardware." The soft RTU has a special operating system, which 
executes on the function maps, which are downloaded to the RTU. 

The hardware interface layer is called the Generic Encapsulation Layer or GEL. This 
hardware interface contains all the low-level communication programs, which enable 
the soft RTU to communicate with the Enterprise server. Some of these programs 
include, timing programs, communication buffers, I/O scanners, memory 
management, real time clock, power management routines. 
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[00053] To operate the soft RTU, controls in individual function blocks indicate to the 
operating system of the soft RTU when they should execute. The default 
configuration of the soft RTU enables immediate communication of the RTU with 
SCADA system at the moment of power up. Access to all I/O points on the RTU is 
5 also granted at the moment of power up. 

[00054] RTU 4000 of the present invention is designed so that all hardware features can be 
configures from ARME. This means the user no longer has to have dipswitches, plug 
in modules, or jumpers. This saves time so that all hardware options with regard to 
3 I/O and communication are set in software only. There is only one reason to open the 

lo box of the RTU of the invention that is to activate the lithium battery, which is good 

if for at least 10 years. 

B [00055] Features of the novel RTU include the ability of the RTU to put itself to sleep, based 
i on change of status, ft can be set to wake up periodically, or be woken up by 

5 telephone. It can be put to sleep periodically as well. 

15 [00056] The invention contemplates using 8 analog inputs, which can be current, or voltage 
inputs and the input that are desired, can be picked by the software of the soft RTU. 

[00057] A multifunction I/O point can be set up as (a) a digital input, a digital output, 
initializing off, initializing on, a low speed counter and a low speed counter of 0-10 
kilohertz, a high speed counter of 125 Kilohertz to 400 kilohertz, a pulse output, a 
20 quadracure decoder. 
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It should be noted that Com Port 1 is always, 232, Com Port 2 and 3, can be RS 232 
or RS 235 and be software configurable. 

Very little power is required by the RTU when it is asleep. It can be powered for 10 
years on the one battery. 

In a preferred embodiment, a 12 VDC power supply can power the RTU 4000E. 
While terminating power supply wires to the RTU be sure to the power supply is off. 
A 12 VDC power supply or battery can be connected to the (+) 12 VDC terminal and 
the (-) 12 VDC (The power supply common should be terminated here. After 
connecting the power supply wires to the RTU, Turn-On the supply. Power-up 
should be indicated by the 12 VDC pilot light, which can be used as an indicator to 
check power connections. 

Once the RTU is powered the next step is to establish communications between the 
RTU and preferably an Intel computer equipped with Windows 95TM or Windows 
NTTM. The RTU initially, permits direct wiring of the RTU, however, just after 
power up with RTU may be configured to communicate via radio, lease line, internet 
or public telephone, however the following procedure will enable a user to use a 
default configuration to connect. 

For direct communication a standard Null Modem cable should be connected to one 
of the three RTU 4000EE serial ports (DB9 Male serial connectors) and to COM2, 
the second serial port on the Intel computer. If COM2 is not available, other COM 
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Ports may be used. To use other COM Ports, attach the serial cable to the desired 
COM Port 's; Configuring Ports. 

[00063] The AES is compatible with Window 95TM or Windows NTTM. AES supports 
communication with various RTU's and other vendor products through a computer 
5 serial port or network card. Other software packages can communicate with the 

RTU through AES and its DDE (Dynamic Data Exchange) or OPC (OLE for Process 
Control) Server interface. 

[00064] AES is installed by running an SETUP.EXE program as follows: 

1 1 . Start Windows 95TM, Windows NTTM 

J]0 2. Insert the distribution diskette into a floppy drive 

3. From the Windows Program Manager, invoke the File/Run… command. 

3 4. Enter A:\SETUP (or B:\SETUP.EXE if the diskette is in drive B) and click on 

J the OK or press <ENTER> key. The Setup dialog box will appear: 

[00065] The RTU 4000E1 is a hardened industrial controller suitable for installation in 
15 environmentally exposed locations. The RTU's 32-bit Motorola 68332 processor, 

256 Kbytes of battery backed Static RAM and 16 Mbytes of Flash RAM provide 
strong computing power to perform complex control and data management activities. 
The RTU 4000E1 has three serial ports that can be used for communication with host 
computers, pagers, subordinate RTU's, I/O, analyzers and/or other vendor PLC's and 
20 RTU's. Lastly, the RTU 4000E1 has 53 I/O points that can be interfaced to 
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instruments and actuators to measure and effect changes to process or equipment 
status'; and conditions. 

[00066] When power is initially applRTU to an RTU 4000E1 the Factory Default; 

configuration retained in the RTU's flash memory is loaded to static RAM where it 
5 is executed. (The active configuration in static RAM is the On-line configuration.) 

This configuration allows immediate access to the RTU's I/O through the serial ports 
and the Modbus protocol on power-up. To setup the unit for an automation purpose 
the user can develop a configuration from a library of Function Blocks embedded in 
□ the RTU 4000E1 with the ARME configuration tool. Once loaded, this new 

BO configuration replaces the Factory Default and is called the User Default 

5 configuration. 

M [00067] The RTU 4000E1 is preferably packaged with a metal mounting plate and cover. 
J; This packaging provides RFI protection but does not provide environmental 

si protection from moisture, dust, corrosive chemicals and atmospheres. In addition, the 

d5 RTU is not suitable for installation in industrial areas that have a hazardous 

classification. Additional packaging however, can often meet these requirements. 

[00068] The RTU 4000E1 has Power Input terminations and Battery Input terminations as 
shown in Figure 3. These power inputs are OR'ed in the RTU power circuitry such 
that if one source is removed, the RTU will draw from the remaining power source. 
20 The Power Input terminations are the primary power source and can accept from 1 1 

to 30 VDC. The Battery Input terminations are intended for a system back-up battery 
and will accept from 9 to 14 VDC. Circuits associated with the Battery Input will 



also trickle charge the back-up battery as long as 11 to 30 VDC is applRTU to the 
Power Input terminations. Should the Power Input voltage fall below 1 1 VDC the 
RTU will automatically draw from the Battery Input power source. When the Power 
Input voltage returns to a level between 1 1 and 30 VDC the RTU again draw power 
5 from the Power Input terminations and trickle charge the backup battery. When input 

voltages fall below 9 VDC, a low voltage cutout will protect the RTU from 
indeterminate states that can occur. 

[00069] LED indication of the status of power at the Power Input terminations and the 
=i Battery Input terminations are provided on the face of the RTU above the Reset 

B0 button. When power is applRTU to either the Power Input or the Battery Input 

P terminations the LED will be visible. When power is only applRTU to the Battery 

2 Input the LED will also be visible. 

z [00070] RTU 4000E1 has two grounds, which serve different purposes and must not be 
pi connected during the installation process. Transients, radio frequency interference 

AS (RFI) and over- voltage protection circuitry in the RTU are designed to transfer these 

disruptive or destructive signals to earth ground. The protection circuits connect to 
the mounting plate through mounting pads on the RTU circuit board. The installer 
should take care to insure that the mounting plate is also connected to a reliable earth 
ground. In addition the installer should collect all of the shields associated with 
20 instrument cables/wiring to RTU I/O at the RTU end and should connect these 

shields to earth ground. 
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[00071] The digital grounds associated with Digital I/O, Multifunction I/O and Analog I/O is 
connected within the RTU to Power Input and Battery Input grounds. As indicated in 
the Power and Battery Backup section above these grounds should be connected to 
the Common terminal of the power supply and/or to the Negative Terminal of the 
5 Back-up Battery. 

[00072] An internal lithium back-up battery is provided in the RTU 4000E1 to maintain static 
RAM and the Real Time Clock when power is removed from the Power Input and 
Battery Input terminals. Current control set-points or targets, accumulated values and 

□ alarm thresholds that are being executed in static RAM may be different from those 
DO of the initial configuration maintained in flash RAM. The lithium battery, with a 
P nominal life of 10 years, will maintain all of these settings in static RAM. It is 
2 necessary however, to install a jumper on the RTU circuit board to activate the 
- internal back-up battery. To install, remove the RTU cover and locate the jumper 

□ next to the lithium battery in the upper right hand corner of the RTU circuit board, 
it 5 Press the jumper on the two pens and replace the RTU cover. 

[00073] The user can control power consumption in the RTU to a large extent. Under normal 
operating modes the RTU nominally draws 115 mA at 14 VDC from the Power 
Input source. This does not include the additional power draws of instrumentation, 
telemetry hardware or other devices that may be included in an RTU installation. 
20 The user can reduce this power consumption by putting the RTU in a sleep mode on 

an interval or on an event. This capability can be configured through the ARME. In 
the Sleep Mode the RTU draws 13mA at 14 VDC from the Power Input Source. 
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Finally, further reductions can be made by selectively or completely deactivating 
LED indications on the face of the RTU. Again this feature is configured through 
ARME. 

[00074] The RTU's are designed to monitor and control assets in environmentally exposed 
installations and to receive supervision regarding that mission from a remotely 
located data center. As a result, flexible communication to data center computers is a 
key capability. The RTU 4000E1 has three serial ports that can be individually 
configured for Master or Slave communications, different Modbus Slave IDs, 
communication parameters, hardware handshaking, password protection, privileges, 
and telemetry methods. 

[00075] On initial power-up RTU 4000E1 I/O is accessible through any of the three serial 
communication ports and the Factory Default serial port values. The default settings 
for the serial ports are given in Table 1 below. 



'i [00076] The RTU I/O is also accessible through the Modbus addressing provided in Table 2 
15 below. Note that the address of some points is dependent on the configuration. The 

address for the default configuration of a particular I/O point is indicated in bold. As 
indicated in Table 2, all of the I/O in the RTU 4000E1 have pre-assigned Modbus 
addresses with the exception of the two analog outputs for whom holding addresses 
are assigned by ARME. 

20 [00077] In addition to the default configuration detailed in Table 1, RTU 4000E1 serial ports 
default to the RS-232 electrical standard. COM Ports 2 and 3 however, can be 

23 



configured by ARME to support RS-485. Figure 4 shows the locations of the COM 
Ports and associated LED's. LED's are provided to indicate the status of serial 
communication lines. In addition, the indicators located to the left of the Port 2 and 3 
LED's; indicate whether these ports are configured for RS-232 or RS-485. The RTU 
4000E1, which is a DTE device, is connected to computers and modems through 
standard serial cables. When connecting to computer serial ports a Null Modem 
cable should be used. When connecting to a modem or a radio modem a Straight- 
through cable should be used. Additionally, when communicating through modems 
that require hardware handshaking the cable will require the RTS, CTS and DCD 
lines in addition to TX, RX and GND. 

[00078] In the preferred embodiment, the CPU is a Motorola 68332 16 MHz having 512 KB 
Static RAM and 4 MB Flash RAM. 

[00079] The preferred temperature range for operation of the SCADA system is -40 deg C to 
85 deg C. 

[00080] The Analog Inputs Software are Selectable 0 to 5 VDC or 4 to 20 ma 
[00081] The Analog Output Software Selectable 0 to 5 VDC or 4 to 20 ma. 
[00082] The Multifunction I/O's can be configured in the software as: 

1. Digital Inputs (DI), 

2. Digital Outputs (DO), 

3 . Low Speed Counters / Accumulator (LSC), 



4. High Speed Counters (HSC), 

5. Pulse Outputs (PO), 

6. Quadrature Decoder (QD), or 

7. Pulse Width Modulation (PWM). 

8. DI Mode - 5/12/24 VDC Sink 

9. DO Mode - 5/12/24 VDC Sink 

10. HSC Mode - 125 Hz to lOOKHz @ 5 DC to 36 VDC 

11. LSC Mode - 0 Hz to 10 kHz @ 5 VDC to 36 VDC 

12. PO Mode 125 Hz to 100 kHz @ 5 VDC 

13. PWM Mode 125 Hz to 100 kHz Duty Cycle 

Add-on modules can convert any of these 11 points to additional Analog Inputs, 
Thermocouples Inputs, RTD Inputs, or Analog Outputs. 

There are 32 Digital Points in the software and include: 

1 . Digital Inputs (DI) 5/1 2/24 VDC Sink 

2. Digital Outputs (DO) 5/1 2/24 VDC Sink 

3. LED indication for all Digital Points 

4. Transient Protection 
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5. Compliant with IEEE 472 and ANSI 37.90. 
[00085] The Serial Communication Ports are preferably: 

1 . Port 1 EIA-232, full handshaking, DB-9 Male. 

2. Port 2 EIA-232/485, software selectable, full handshaking, DB-9 Male. 

3. Port 3 EIA-232/485, software selectable, full handshaking, DB-9 Male. 

4. LED indication of Port 2/3 EIA-485 mode. 

5. LED indication of DTR, TX, RX, DCD, RTS, and CTS for each port. 
[00086] The Power Supply is preferably set with: 

1. Three power modes: Un-powered, Sleep, Operational 

2. Primary Power Input 

3 . Power Requirement 11-30 VDC 

4. Operational Mode: Minimum power draw is 115 mA @ 14 VDC plus @ 1.8 
mA/LED 

5. Sleep Mode: Minimum power draw is 13 mA @ 14 VDC 

6. LED indication when powered by Primary Power source 

7. Back-up Battery Input 

8 . Power Requirement 9-3 0 VDC 
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[00087] In the Operational Mode, the minimum power draw is 102 mA @ 12 VDC plus @ 
1.8 mA/LED 

[00088] In the Sleep Mode: 

1 . The RTU is configured to enter Sleep mode by software logic. 

2. The RTU awakens upon: 

3 . Return of power 

4. Alarm Clock setting 

5. Modem ring indication 

[00089] The preferred overall dimension of the RTU is 6.14W x 11.5L x L35H with 
mounting plate. 

[00090] The firmware of the RTU's control, data acquisition, alarm and event, and data 
logging capabilities are configured with the RTU Maintenance Environment 
(ARME). In addition all hardware options are configured from ARME. No hardware 
jumpers, switches or plug-ins are required. 

[00091] The RTU 4000E supports the Modbus protocol standard, and can monitor 17 million 
RTU Addresses, provide: 

1 . Exception Reporting 

2. Scatter Reads (Registers do not have to be contiguous.) 
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3. Mixed Data Type Messaging, and 

4. Security/Access privileges configurable per port, which are 

a. Read Only 

b. Read/Write, or 

c. Read/Write/ Configure. 

[00092] The master protocols supported by the invention include: 

1. Modbus ASCII and RTU 

2. Daniels Modbus ASCII and RTU 

3. Enron Modbus 

4. Rosemount 3095 Modbus 

5. Extended Modbus 

6. Yokagawa Power Quality Monitor 
[00093] Slave protocols supported include: 

1 . Modbus ASCII and RTU, 

2. Daniels Modbus ASCII and RTU, 

3. Enron Modbus, 
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4. Extended Modbus. 

For Data Acquisition, on power-up all RTU I/O is accessible via EIA-232 and 
Modbus addressing, no programming required. In addition, 

1 . Data archival sampling rates are configurable from seconds to hours. 

2. RTU flash RAM that is available for data archival can store 365 days of hourly 
data for 24 points. Over 250,000 records available for storage. 

The invention allows up to 100 function blocks can be configured to address control, 
data acquisition, data logging or alarm applications. The function blocks can be: 

1 . Accumulator/Totalizer Block 

2. AG A Block Compressible Fluid 

3. Incompressible Fluid 

4. AGA 3 

5. AGA 8 Detailed 

6. AGA 8 Gross 1 

7. AGA 8 Gross 2 

8. AGA 7 

9. Alternate Block 
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10. Analog Alarm Block 

1 1 . Analog Input Block 

12. Archive Block 

1 3 . Boolean/Math Block 

14. Cryout Block 

1 5 . Digital Alarm Block 

16. LCD Block 

17. Mapping Block 

1 8 . Momentary Block 

19. On/Off Control Block 

20. PID Control Block 

21. Scale Block 

22. Staging Block 

23. Sleep Block 

24. Stop Watch Block 

25. System Block 



26. Timer BlockValve Block 

27. User definable Function Blocks via Soft RTU Toolkit 
[00096] The Enterprise Server includes: 

I . On-line configuration supports non-stop communication with field devices. 
5 2. Communication Server runs as a Service in Windows NT 4.0 and 2000. 

3 . Communication support includes, 

\~ 4. Real-time data polling, 

; J: 5 . Archival data uploads from field devices, and 

, J 6. Exception reports or Cryouts from field devices. 

HO 7. Configuration tools are ActiveX controls that can be run in an OLE 

o 8. Container Compliant HMI or Browser. Remote Administration Supported. 

9. Embedded diagnostics logs performance information and forensics data to 

1 0. ASI Viewer and/or Log File. 

II. Most communication functions and controls are accessible to external 
15 applications through the OPC Server interface. 

1 2 . Embedded Client triggers, 

1 3 . Enables real-time data caching for OPC Client applications. 
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14. Automatic archived data uploads from field devices without OPC Client 
application. 

15. Item aliases supported for protocol independent HMI/Client Application 
development. 

1 6. Browsing supports protocol specific data types/items and Aliases. 

17. Multiple protocols can be supported on a single communication channel. 
[00097] Telemetry methods, which are usable in this invention, include: 

1 . Serial Cable, Leased-line or Serial Multi-drop, 

2. PSTN and PPP via Modem, 

3. Radio (Conventional, Trunking, and Spread- Spectrum Radio), 

4. VSAT, 

5. TCP/IP Ethernet, TCP/IP Ethernet Terminal Servers, and IP. 
[00098] Protocols Modules include: 

L Modbus Module 

2. Modbus RTU and ASCII 

3. Omni 3000/6000 Modbus (Real-time Data, and History and Report Uploads) 

4. Daniels Modbus RTU and ASCII (Real-time Data and History Uploads) 

32 



5. Enron Modbus (Real-time Data and History Uploads) 

6. Flow Automation Modbus (Real-time Data and History Uploads) 

7. ABB TotalFlow Modbus (Real-time Data and History Uploads) 

8. Motorola MOSCAD Modbus 

5 9. Delta X Modbus (Real-time Data and Dynagraph Cards) 

10. Baker CAC Modbus (Real-Time Data and Dynagraph Cards) 

3 11. User Configurable Register Sets 

!f a. Bristol Babcock BSAP Module 

^ b. ABB TotalFlow Packet (Native) Protocol Module (Real-time Data and 
H o History Uploads) 

fl c. ABB HCI-A Module (AAI Analyzers) 

d. Allen Bradley DF 1 Module 

12. Master-Slave (Half Duplex) 

1 3 . Point-To-Point (Full Duplex) 

15 a. Fisher ROC Module (ROC 300 Series, FloBoss 407, 500 Series) (Real- 

time Data and History Uploads) 

b. GE SNP Module 
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c. GE 90 Series PLC Ethernet Module 

d. HP48000 Module (Real-time Data and History Uploads) 

e. Cutler Hammer - IMPACC System Communications Module 

f. Detroit Diesel DDEC Module (Detroit Diesel Electronic Controller) 

g. General Motors EMD MDEC Module (Marine Diesel Electronic 
Controller) 

h. Caterpillar ECM Module (Electronic Controller Module) 

i. Nautronix ASK Module 

j . Mercury EC AT, ER Module (Real-time Data and History Uploads) 
k. Teledyne CA, TGP Module 
Preferred Server Interface Formats include: 

a. OPC (OLETM for Process Control) 

b. Microsoft CF_TEXT ? XlTable 

c. Rockwell Software AdvanceDDETM 

d. Wonderware FastDDETM 

The types of communication transactions include: 
a. Real-time Data 
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b. Interval Polling at 15 different intervals (Periodic Timer Triggered) 

c. Slow Polls at 15 Intervals are a percentage of Polling Interval (Faster 
and Slower rates are supported.) 

d. Synchronous Polling (Clock or Calendar Triggered) 
5 e. Demand Polling (DDE/OPC Client Triggered) 

f. History/ Archived data Uploads 

g. Interval Uploads at 1 5 different intervals (Periodic Timer Triggered) 

i h. Slow Uploads at 15 Intervals are a percentage of Polling Interval 

= r (Faster and Slower rates are supported.) 

"lO i. Synchronous Uploads (Clock or Calendar Triggered) 

3 [00099] The AES can communication without an OPC request from an external Client. It 
5 provides more deterministic performances as real-time data items are constantly 

active. The data collected is cached for delivered to external Client applications via 
the Server interface. Provides standalone history/archived data uploads from field 
15 devices for storage in database or audit files without the requirement of an external 

Client. 

[000100] Documentation and Configuration, the invention permits the following: 
1 . OLE DB interface support for all leading relational databases. 
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Database driven external configuration tools to ease maintenance of large 
applications. 

Database driven reports to document AES configuration. 

Database tools to support simultaneous configuration of HMI/Client 
Application and AES. 

SCAD A Capabilities, this invention allows: 

a. Client access to communication diagnostics for each telemetry channel 
and for each RTU/PLC. 

b. One AES installation to support multiple protocols. 

c. Multiple protocols can be supported over one communication channel. 

d. Client-Server interface to give a Client full control of all aspects of the 
server including: 

( 1 ) Polling Interval 

(2) Demand Polling 

(3) Telephone number for dial-up 

e. AES redundant devices: RTU/PLCs. 

f. Automatic fail-over to back-up device 
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g. AES supports redundant telemetry channels/methods to a single device: 

h. Data Logging: 

(1) Uploaded data can be logged to any leading database via OLE DB. 

(2) EFM data uploads can be written to Flow Cal files or to Flow Cal 
Enterprise (Oracle) format. 

(3) User defined periodic file closing: file size control 

(4) User defined path to file location 

(5) User defined directory and file labels identify file content, date and 
time. 

(6) User defined automatic file purging: directory size control 

i. Diagnostic Logging: 

(1) AES logs diagnostic and forensic data to an ASI Viewer and/or Log 
file. 

(2) Data that can be activated for Diagnostic Logging includes the 
following. 

j. Message Errors 

k. Send Messages 
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1. Receive Messages 
m. Device and Item Activity 
n. Status Changes 
o. Client Data Received 
p. Field Device Data Received 
q. Event Notification from Ports 
r. Receive Buffer Contents and Data 
s. Item Name, Value and Quality 
t. Changes in Client Status 
u. Changes in AES Configuration 
v. Data Flow Between AES Components 
w. Performance Data regarding Threads 
x. AES Footprint or Tracing Information 
The invention has as features: 

1 . Control, alarm monitoring, data logging, data acquisition, and communication 
functions of the embedded SoftRTU are implemented using ARME. 
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2. Data acquisition immediately on power-up without configuring or 
programming. 

3. A fill-in-the-blank configuration interface that is used to setup RTU functions 
without programming. 

5 4. Ability to reconfigure RTU's while they are on-line. 

5. Loading of new configurations over the telemetry system. 

6. Loading of RTU configurations to be uploaded and modifRTU for 
£ downloading to other RTU's. 

7. Configuration to archive data for periods greater than one year to nonvolatile 
g}0 memory. 

3 8. Synchronization utilities between the RTU and the host computer. 

[000102] This SCADA system can be used for: 

1 . Electrical Power Quality Monitoring 

2. Electronic Flow Measurement (EFM) 
15 3. Compressor Control 

4. Wastewater Collection and Water Distribution Systems 

5. Pump Control 
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6. Pipeline Valve Control 

7. Surveillance 

8. Environmental Monitoring 

9. Traffic Control 

5 10. Safety and Early Warning Systems 

[0001 03] Connection features are as follows: 

3 1 . Connection (TAC) is a data logger that has a DDE/OPC Client Interface. 

^ 2. TAC can acquire data from any DDE, OPC or ODBC source, and store the 

* I data via ODBC to any compliant database. 

=40 3. TAC can also retrieve data from the database and write the data to an RTU or 

| PLC via the DDE/OPC Server. 

*k 4. Data is acquired on an Interval, External Trigger, Change in Value or Change 

of State, and synchronous with the clock. 

5. Multiple logging or retrieval plans, called Schemes, can be configured to 
15 transfer data periodically or on event for various business, engineering, or 

research purposes. Each logging Scheme subsequently writes the data to its 
specific database file format or to a file. 
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6. TAC also has a Watch-Dog-Timer to insure data is not lost during a network 
failure or due to the loss of a network storage device. Data is logged to the 
secondary path on failure of the Watch-Dog-Timer. 

7. The intervals at which TAC log files are closed are configurable for each 
Scheme. 

8. The interval at which the directory for TAC log files is purged is configurable 
for each Scheme. 

9. DDE formats supported include Microsoft formats and Advanced DDE. 

10. TAC is especially suited for uploading time-stamped data from intelligent data 
acquisition and control systems. 

1 1 . TAC runs on Windows 95 and Windows NT. 

The above description of preferred embodiments is not intended to implRTUly limit 
the scope of protection of the following claims. Thus, for example, except where 
they are expressly so limited, the following claims are not limited to a method 
wherein the simulation data is transferred to the RTU. The simulation data could be 
stored locally in memory, on magnetic disk, magnetic tape or the like. Moreover, the 
claims are not limited to a method of entering simulation mode by removing the 
register update module from the task list. Other methods could be equally effective. 
For example, the register update module could itself recognize the RTU mode and 
withhold from storing data in the registers. 
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